Approve or reject a blocked deployment to a protected environment. Approving can let a production deploy proceed. Premium/Ultimate.

Approve a merge request.

Publish all merge-request draft notes. On GitLab 19.2+ it can also set your reviewer state (requested_changes or reviewed; not a formal approval) and post a summary note, even with no drafts.

Cancel a running pipeline.

Cancel one running job. force=true also cancels a job stuck in the canceling state.

Mark a vulnerability of project_id as confirmed, optionally with a comment. Ultimate.

Convert a work item to a different type.

Create a new branch from an existing ref.

Create or update the status of a commit.

Record a deployment of a commit to an environment, for deploys performed outside GitLab CI/CD. The environment is created if it does not exist.

Create a merge-request draft note.

Create a project environment with optional external URL, tier, description, Kubernetes settings, and auto-stop behavior.

Create a new GitLab group or subgroup.

Create an iteration in a group. Recent GitLab versions require iterations_cadence_id of a manual (non-automatic) cadence. Dates use YYYY-MM-DD. Premium/Ultimate.

Create an iteration cadence. automatic cadences schedule iterations from start_date, duration_in_weeks, and iterations_in_advance; manual cadences let you create iterations yourself. Premium/Ultimate.

Create a group milestone that projects and subgroups in the group can use. Dates use YYYY-MM-DD.

Create a group wiki page.

Create a new issue.

Add an emoji reaction to an issue, for example thumbsup, rocket, or eyes.

Create a relation between two issues.

Create issue comment (top-level or discussion note).

Add an emoji reaction to an issue note. Pass discussion_id for discussion replies.

Create a label.

Create a merge request.

Add note to existing MR discussion thread.

Add an emoji reaction to a merge request, for example thumbsup, rocket, or eyes.

Create a top-level MR note.

Add an emoji reaction to a merge request note. Pass discussion_id for discussion replies.

Create a new MR discussion thread (supports diff positions).

Create a milestone.

Create a note on an issue or merge request.

Create or update one file in repository.

Trigger a new pipeline.

Create a recurring pipeline from a cron expression. cron_timezone defaults to UTC; use a full ref such as refs/heads/main when a branch and tag share a name. inputs ([{name, value}]) need GitLab 18.1+.

Create a pipeline trigger token for external systems. The response contains the new token once; store it securely because list, get, and update never return it.

Create a project snippet with 1 to 10 files. visibility defaults to the project setting; public snippets are visible to anyone who can see the project.

Create a release.

Create evidence for an existing release.

Create a new GitLab project/repository.

Create a repository tag from a branch, commit SHA, or another tag.

Create an incident timeline event with optional known GitLab incident timeline tags.

Create a project or group webhook. GitLab then sends the selected event payloads to url, so only target endpoints you trust. token and url are redacted from errors and never returned.

Create a wiki page.

Create a work item of type issue, task, incident, test_case, epic, key_result, objective, requirement, or ticket.

Add an emoji reaction to a work item, for example thumbsup, rocket, or eyes.

Add a note or threaded reply to a work item.

Add an emoji reaction to a work item note by GraphQL note_id.

Delete a repository branch permanently. Requires branch. Recommended pre-check: gitlab_get_branch.

Delete a deployment record permanently. GitLab refuses running deployments and the latest deployment of an environment. Requires deployment_id. Recommended pre-check: gitlab_get_deployment.

Delete a merge-request draft note permanently. Irreversible. Requires merge_request_iid and draft_note_id. Recommended pre-check: gitlab_get_draft_note or gitlab_list_draft_notes.

Delete a stopped environment permanently. Irreversible. Requires environment_id. Recommended pre-check: gitlab_get_environment, then gitlab_stop_environment.

Delete a group iteration permanently; issues lose the iteration. Irreversible. Requires group_id and iteration_id. Recommended pre-check: gitlab_list_group_iterations. Premium/Ultimate.

Delete an iteration cadence and its iterations permanently. Irreversible. Requires group_id and iteration_cadence_id. Recommended pre-check: gitlab_list_group_iteration_cadences. Premium/Ultimate.

Delete a group milestone permanently; issues and merge requests lose the milestone. Irreversible. Requires group_id and milestone_id. Recommended pre-check: gitlab_get_group_milestone.

Delete a group wiki page permanently. Irreversible. Requires group_id and slug. Recommended pre-check: gitlab_get_group_wiki_page or gitlab_list_group_wiki_pages.

Delete an issue permanently. Irreversible. Requires issue_iid. Recommended pre-check: gitlab_get_issue.

Delete an emoji reaction from an issue permanently. Irreversible for that reaction. Requires issue_iid and award_id. Recommended pre-check: gitlab_list_issue_emoji_reactions.

Delete an issue link permanently. Irreversible for that relation. Requires issue_iid and issue_link_id. Recommended pre-check: gitlab_get_issue_link or gitlab_list_issue_links.

Delete an emoji reaction from an issue note permanently. Irreversible for that reaction. Requires issue_iid, note_id, and award_id. Recommended pre-check: gitlab_list_issue_note_emoji_reactions.

Delete a label permanently. Irreversible. Requires name or label_id. Recommended pre-check: gitlab_get_label or gitlab_list_labels.

Delete an MR discussion note permanently. Irreversible. Requires merge_request_iid, discussion_id, and note_id. Recommended pre-check: gitlab_list_merge_request_discussions.

Delete an emoji reaction from a merge request permanently. Irreversible for that reaction. Requires merge_request_iid and award_id. Recommended pre-check: gitlab_list_merge_request_emoji_reactions.

Delete a top-level MR note permanently. Irreversible. Requires merge_request_iid and note_id. Recommended pre-check: gitlab_get_merge_request_note or gitlab_list_merge_request_notes.

Delete an emoji reaction from a merge request note permanently. Irreversible for that reaction. Requires merge_request_iid, note_id, and award_id. Recommended pre-check: gitlab_list_merge_request_note_emoji_reactions.

Delete a milestone permanently. Irreversible. Requires milestone_id. Recommended pre-check: gitlab_get_milestone or gitlab_list_milestones.

Delete a pipeline and its job logs, artifacts, and test reports permanently. Irreversible. Requires pipeline_id. Recommended pre-check: gitlab_get_pipeline.

Delete a pipeline schedule and its variables permanently. Irreversible; prefer gitlab_update_pipeline_schedule with active=false to pause. Requires pipeline_schedule_id.

Delete a pipeline trigger token permanently; systems that use it can no longer start pipelines. Requires trigger_id. Recommended pre-check: gitlab_list_pipeline_triggers.

Delete a project snippet and all of its files permanently. Irreversible. Requires snippet_id. Recommended pre-check: gitlab_get_project_snippet.

Delete the release record for tag_name permanently. Irreversible for the release entry. Requires tag_name. Recommended pre-check: gitlab_get_release or gitlab_list_releases.

Find stopped review-app environments older than before (default 30 days ago) and, with dry_run=false, schedule their deletion one week later. dry_run defaults to true and only previews.

Delete a repository tag permanently. Irreversible for tag_name. Requires tag_name. Recommended pre-check: gitlab_get_tag or gitlab_list_tags.

Delete a project or group webhook permanently; GitLab stops sending its events. Irreversible. Requires hook_id. Recommended pre-check: gitlab_list_webhooks.

Delete a wiki page permanently. Irreversible. Requires slug. Recommended pre-check: gitlab_get_wiki_page or gitlab_list_wiki_pages.

Remove the current user's emoji reaction from a work item by emoji name. Requires iid and name.

Remove the current user's emoji reaction from a work item note by GraphQL note_id and emoji name.

Search the complete tool registry without mutating session state. Results explain whether each tool is currently enabled.

Dismiss a vulnerability of project_id with a reason (acceptable_risk, false_positive, used_in_tests, mitigating_control, not_applicable) and an optional comment. Ultimate.

Download attachment by URL/path and return base64.

Download the full job artifacts archive as base64 content.

Download the full job artifacts archive to a local directory.

Download a release asset using its direct asset path.

Erase a finished job's log and artifacts permanently; the job record remains. Irreversible. Requires job_id. Recommended pre-check: gitlab_get_pipeline_job.

Execute a GraphQL mutation. Readonly mode disables this tool; modify mode rejects destructive mutation-root fields.

Execute read-only GraphQL query.

Fork an existing project to another namespace.

Get details for one repository branch.

Compare two branches/refs and return diffs.

Get one GitLab CI/CD Catalog resource, including paginated versions and components.

Get one commit by SHA.

Get diff for one commit.

Get one deployment by ID.

Get a single merge-request draft note.

Get one environment by ID.

Get git blame for a repository file at a given ref. Optional line range must provide both range_start and range_end.

Get a file in repository by path and ref.

Get one group milestone by its ID.

Get burndown chart events for a group milestone. Premium/Ultimate.

Get group wiki page by slug.

Get issue by IID.

Get a single issue link by ID.

Return one file from a job artifacts archive as inline UTF-8 or base64 content.

Save one file from a job artifacts archive to a local directory.

Get one label by ID.

Get one merge request.

Get approval state for MR.

High-signal MR code context with include/exclude filters, sorting, and token-budgeted output.

Get conflict details for MR.

Get MR diffs with changed files.

Get one MR discussion thread by discussion_id with all its notes and resolution state. Use gitlab_list_merge_request_discussions to find IDs.

Step 2 for large MR review: fetch diffs for specific files from a merge request.

Get a single MR note.

Get one MR diff version.

Get a milestone by ID.

List burndown events for a milestone.

List issues assigned to a milestone.

List merge requests assigned to a milestone.

Get namespace by ID or path.

Get one pipeline.

Get one job by job ID.

Get a bounded, untrusted job trace window (at most 1,000 lines from the end), or pass search (a substring or list of substrings, case-insensitive by default) to return only matching lines with context from the loaded log.

Get one pipeline schedule with its last pipeline, inputs, and variable metadata. Variable values require GITLAB_ALLOW_CI_VARIABLE_VALUES=true and include_variable_values=true.

Get the unit test report for a pipeline: totals plus each suite's test cases with status, timing, and stack traces. Pass test_case_status (for example ["failed","error"]) to keep only matching cases.

Get per-suite test counts and totals for a pipeline without individual test cases. Use gitlab_get_pipeline_test_report for failures.

Get one pipeline trigger token's metadata. The token value is never returned.

List the variables a pipeline was started with. Values require GITLAB_ALLOW_CI_VARIABLE_VALUES=true and include_value=true.

Get project details by ID or path.

List events for a specific project.

Get a project snippet's metadata. Set include_content=true to also return the raw content of up to 10 files; ref overrides the snippet revision.

Get one protected branch or wildcard rule.

Get one protected tag rule by tag name or wildcard.

Get one release by tag name.

List files and directories in a repository tree. For large trees pass pagination=keyset and follow next_page_token as page_token; offset page/per_page also work.

Get one runner's tag_list, run_untagged, locked, access_level, status, and version. The runner must be available to project_id; runner authentication tokens are never returned.

Get a repository tag by name.

Get the X.509 signature for a signed repository tag.

List timeline events for an incident work item.

Get one user by ID.

Search users.

Get one vulnerability with its description, identifiers, links, and location. The vulnerability must belong to project_id. Ultimate.

Find one webhook event by ID. Provide page when known, otherwise scans up to 500 recent events.

Get wiki page by slug.

Get a single work item with full widget details including status, hierarchy, labels, assignees, linked items, custom fields, and development data.

List repository branches.

List GitLab CI/CD Catalog resources with cursor pagination and catalog filters.

List commits in a project.

List statuses for a commit.

List custom field definitions for a work item type, including field IDs, types, options, and supported work item types.

List merge requests shipped with a deployment, for release notes and change tracking. Supports state, ordering, and pagination.

List deployments in a project.

List draft notes on a merge request.

List environments in a project.

List current user events.

List a group's iteration cadences (GraphQL; no REST endpoint exists). Filters: active, automatic, title, duration_in_weeks, include_ancestor_groups. Returned IDs are cadence global IDs. Premium/Ultimate.

List iterations for a group.

List direct group members by default, for example to find reviewers or assignees by name; set include_inheritance=true to include members inherited from parent groups.

List merge requests across every project in a group and its subgroups, with the same filters as gitlab_list_merge_requests. non_archived=true skips archived projects.

List issues assigned to a group milestone across the group's projects.

List merge requests assigned to a group milestone across the group's projects.

List milestones defined on a group. Supports iids, state, title, search, ancestor/descendant inclusion, and date filters.

List projects under a group.

List wiki pages in a group.

List issue discussions.

List emoji reactions on an issue.

List related issue links for an issue.

List emoji reactions on an issue note. Pass discussion_id for discussion replies.

List issues in project.

List files and directories inside a job artifacts archive.

List project labels.

Step 1 for large MR review: return changed file metadata without diff content.

List detailed MR diffs (versions/changes view).

List MR discussions.

List emoji reactions on a merge request.

List emoji reactions on a merge request note. Pass discussion_id for discussion replies.

List top-level notes for an MR.

List pipelines associated with a merge request.

List merge requests for a project.

List MR diff versions.

List project milestones.

List namespaces visible to user.

List jobs in a pipeline.

List pipelines for a project.

List pipelines triggered by one pipeline schedule, with scope, status, sort, and date filters.

List scheduled pipelines with cron, timezone, next_run_at, owner, and active state. Use gitlab_get_pipeline_schedule for variables and inputs.

List downstream/bridge trigger jobs in a pipeline.

List pipeline trigger tokens with description, owner, and last_used. Token values are never returned.

List iterations available to a project (those of its group hierarchy). Supports state, search, search_in, include_ancestors, and date filters. Premium/Ultimate.

List direct project members by default; set include_inheritance=true to include inherited members.

List runners a project can use, including group and instance runners. Supports type, status, paused, and tag_list filters. Use gitlab_get_runner for tags and settings of one runner.

List projects available to the current user.

List a project's snippets with title, visibility, author, and file names.

List a project's vulnerabilities with severity, state, scanner, identifiers (CVE/CWE), and location. Filter by state, severity, and report_type; page with first and the returned page_info.end_cursor as after. Ultimate.

List protected branch rules for a project.

List protected tag rules (names or wildcards such as v*) with their create access levels.

List project releases.

List repository tags for a project.

List to-do items for the current authenticated user.

List recent webhook events for a project or group webhook. Use summary mode for overviews.

List configured webhooks for a project or group.

List wiki pages in a project.

List emoji reactions on a work item.

List emoji reactions on a work item note by GraphQL note_id.

List threaded discussions and notes on a work item.

List work items in a project with filters for type, state, search, assignees, and labels.

List available statuses and allowed hierarchy/conversion types for a work item type.

Mark all pending to-do items as done for the current authenticated user.

Mark one to-do item as done.

Merge an existing merge request.

Move a work item to a different project.

List issues assigned to the current authenticated user.

Play a manual job, optionally with job_variables_attributes ([{key, value}]) and typed job_inputs.

Run a pipeline schedule now without changing next_run_at. GitLab rate-limits this per schedule.

Promote a project milestone to a group milestone.

Protect a branch or wildcard rule and configure role-based push, merge, and unprotect access.

Protect a tag name or wildcard (for example v*) so only allowed roles can create it and protected CI/CD variables reach its pipelines. create_access_level: 0 no one, 30 Developer, 40 Maintainer (default), 60 Admin.

Publish one merge-request draft note.

Create a commit with multiple file actions.

Rebase a merge request's source branch onto its target (GitLab force-pushes the source branch). With wait=true (default) it polls up to timeout_seconds (default 60, max 300) and reports previous_sha, sha, head_changed, and merge_error. Use gitlab_get_merge_request_conflicts for conflicts.

Change an issue's relative position in boards and manually sorted lists. move_after_id and move_before_id take global issue IDs (the id field, not iid) of the neighbors: move_after_id is the issue that should follow this one and move_before_id the issue that should precede it.

Resolve/unresolve an MR discussion note.

Retry failed jobs in pipeline.

Retry one failed job. job_inputs overrides typed values for the job's inputs definitions.

Search code across all projects on the GitLab instance. Requires GitLab code search support.

Search repository code blobs in a specific project.

Search code in a specific group.

Search code in a specific project.

Search repositories by keyword.

Stop an environment, which runs its on_stop job and typically tears down the deployed app. force=true stops it without running on_stop. Recommended pre-check: gitlab_get_environment.

Stop every environment last modified or deployed before an ISO 8601 date (between 10 years and 1 week ago). GitLab skips protected environments; this stops but does not delete.

Make the current user the owner of a pipeline schedule; scheduled pipelines then run as this user.

Start a pipeline with a pipeline trigger token or CI/CD job token, as used by external systems and multi-project pipelines. Use gitlab_create_pipeline when acting with your own credentials. The token is sent in the request body and never echoed.

Remove current user approval from MR.

Remove protection from a branch or wildcard rule. This immediately permits actions previously blocked. Requires branch. Recommended pre-check: gitlab_get_protected_branch.

Remove protection from a tag name or wildcard, allowing any developer to create matching tags. Requires name. Recommended pre-check: gitlab_get_protected_tag.

Change a project's default branch to an existing branch.

Change the status of a deployment created outside GitLab CI/CD.

Update a merge-request draft note.

Update an environment's external URL, tier, description, Kubernetes settings, or auto-stop behavior. GitLab does not allow renaming environments.

Update a group iteration's title, description, or dates. iteration_id is the numeric ID from the iteration list or its global ID. Premium/Ultimate.

Update an iteration cadence of the group. iteration_cadence_id is a numeric ID or cadence global ID from gitlab_list_group_iteration_cadences. Premium/Ultimate.

Update a group milestone's title, description, dates, or state (state_event close or activate).

Update group wiki page by slug.

Update issue fields.

Apply a search/replace or unified diff patch to an issue description without sending the full replacement text.

Update an issue discussion note body or resolved state.

Update a label.

Update merge request fields. labels replaces every label; add_labels and remove_labels change only the named ones. milestone_id 0 unassigns the milestone.

Update note body/resolved state in MR discussion.

Update MR note body.

Update milestone fields.

Rename a pipeline. Only the pipeline name can be changed.

Change a pipeline schedule. Pass active=false to pause it. To remove an input, pass {name, destroy: true}. Take ownership first when the schedule belongs to another user.

Change a pipeline trigger token's description. The token value is never returned.

Update an allowlisted set of project metadata, merge defaults, and feature access levels.

Update a project snippet's title, description, visibility, or files. Each file change needs action create, update, delete, or move (move requires previous_path).

Change an existing branch protection rule in place: allow_force_push, code_owner_approval_required, and allowed_to_push/allowed_to_merge/allowed_to_unprotect entries. Add an entry with one of access_level, user_id, group_id, or deploy_key_id (push only); change one with its id; remove one with {id, _destroy: true}. Read entry ids with gitlab_get_protected_branch. Changes that would leave nobody allowed to unprotect are refused.

Update existing release.

Update a project or group webhook's URL, secret token, events, or SSL verification. Omitted fields keep their values.

Update wiki page by slug.

Update a work item title, description, labels, assignees, state, status, hierarchy, linked items, custom fields, dates, milestone, iteration, and incident metadata.

Upload markdown file/attachment to project.

Validate provided GitLab CI/CD YAML content for a project.

Validate an existing project CI/CD configuration.

Verify if namespace path exists.

Poll a job until it reaches success, failed, canceled, skipped, or manual, or until timeout_seconds (default 60, max 300) elapses. Returns completed=false with the last status on timeout; call again to keep waiting.

Poll a pipeline until it reaches success, failed, canceled, skipped, or manual, or until timeout_seconds (default 60, max 300) elapses. Returns completed=false with the last status on timeout; call again to keep waiting.

Get the current authenticated user.

Return server liveness, name, and version. Set check_gitlab=true to also verify that GitLab is reachable, that the configured credential authenticates, and which GitLab version answers.